ZyXEL Communications XS3800-28, User Manual, Page: 649 / 789

Chapter 85 Port Authentication
XS3800-28 User’s Guide
649
85.4 Guest VLAN
When 802.1x or MAC Authentication is enabled on the Switch and its ports, clients that do not have the
correct credentials are blocked from using the ports. You can configure your Switch to have one VLAN
that acts as a guest VLAN. If you enable the guest VLAN (
102 in the example) on a port ( 2 in the
example), the user ( A in the example) that is not IEEE 802.1x capable or fails to enter the correct user
name and password can still access the port, but traffic from the user is forwarded to the guest VLAN.
That is, unauthenticated users can have access to limited network resources in the same guest VLAN,
such as the Internet. The access granted to the Guest VLAN depends on how the network administrator
configures switches or routers with the guest network feature.
Password Type the password the Switch sends along with the MAC address of a client for authentication
with the RADIUS server. You can enter up to 32 printable ASCII characters except [ ? ], [ | ], [ ' ],
[ " ] or [ , ].
Timeout Specify the amount of time before the Switch allows a client MAC address that fails
authentication to try and authenticate again. Maximum time is 3000 seconds.
When a client fails MAC authentication, its MAC address is learned by the MAC address table
with a status of denied. The timeout period you specify here is the time the MAC address entry
stays in the MAC address table until it is cleared. If you specify 0 for the timeout value, the
Switch uses the
Aging Time configured in the SYSTEM > Switch Setup screen.
Note: If the Aging Time in the SYSTEM > Switch Setup screen is set to a lower value,
then it supersedes this setting.
SLOT This field appears only in Stacking mode. Click the drop-down list to choose the slot number of
the Switch in a stack.
Port This field displays the port number. In Stacking mode, the first number represents the slot ID and
the second is the port number. Please note that the default stacking ports (the last four ports of
your Switch) cannot be configured. They are reserved for stacking only.
* Use this row to make the setting the same for all ports. Use this row first and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you make them.
Active Select this check box to permit MAC authentication on this port. You must first allow MAC
authentication on the Switch before configuring it on each port.
Trusted-VLAN List Enter the ID numbers of the trusted VLANs (separated by a comma). If a client’s VLAN ID is
specified here, the client can access the port and the connected networks without MAC
authentication.
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Table 350 SECURITY > Port Authentication > MAC Authentication (continued)
LABEL DESCRIPTION